diff options
| author | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2016-11-24 09:54:17 +0100 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2016-11-25 10:37:07 +0100 |
| commit | 77302d85c4b090f5221bab512452a6487998a712 (patch) | |
| tree | 6c346a58b2e0c675796602a1e5fd2059842aa7de | |
| parent | 95e1cbc9a66161a9f60bd4f0db3c6cb4c6a7e690 (diff) | |
| download | gnutls-77302d85c4b090f5221bab512452a6487998a712.tar.gz | |
pkcs7: corrected iteration over stored certificates
This allows to use all possibly stored certificates on chain discovery,
not only the first.
| -rw-r--r-- | lib/x509/pkcs7.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/x509/pkcs7.c b/lib/x509/pkcs7.c index a6466126f3..565c8ed80e 100644 --- a/lib/x509/pkcs7.c +++ b/lib/x509/pkcs7.c @@ -1115,7 +1115,7 @@ gnutls_x509_crt_t find_signer(gnutls_pkcs7_t pkcs7, gnutls_x509_trust_list_t tl, for (i = 0; i < (unsigned)count; i++) { /* Try to find the signer in the appended list. */ - ret = gnutls_pkcs7_get_crt_raw2(pkcs7, 0, &tmp); + ret = gnutls_pkcs7_get_crt_raw2(pkcs7, i, &tmp); if (ret < 0) { gnutls_assert(); goto fail; |